Free WordPress Security Test
This project has been moved to BlogSecurity.net. Try out the free online WordPress Vulnerability scanner, its really cool.
Get a free WordPress Blog Security test. Thats right! I (or a contributer) will perform unauthenticated tests against your WordPress blog to check for security weaknesses that attackers can exploit. The results of your test will not be disclosed, but the lessons learned will be contributed back to the community to help develop more secure software.
Why do I need this?
Although WordPress is a fantastic peice of software, there are factors that can make it insecure very quickly. I recently saw a blog claiming to be earning $4K per/day on ads revenue running in an incredibly insecure manner.
See some of my vulnerabilities and papers regarding WordPress security:
How do I request a test?
Simply fill in the Contact form requesting the test, and stating that you give me permission to perform a security test of your Blog at "Blog URL" and that you are the legimate owner of the Blog. To verify your identity and to prevent being spammed to death with requests, you will be asked to make a donation from the support page. $30 is considered generous for this venture, although as less $1 is acceptable.
Why are you doing this?
Good question, see "About Operation n".
How do I prepare for the test?
Get permission from your hosting provider (only required if your WordPress blog is hosted). This response will be requested before any testing commences.
Ensure that you have made a full backup of your WordPress files and database.
How long will it take?
This test is specific to WordPress, and our WordPress Vulnerability Scanner can give us a nice overview within 5 minutes; however, testing may take up to a day or two to complete depending on my (or contributers) free time. You will be sent an email with our findings to conclude our test as well as our recommendations.
Why WordPress?
It is an Open Source blogging package that has grown significantly. This means it has a massive user database. Unlike other applications, WordPress is often run by very non-tech savvy people. I wanted to provide a free service to allow people peace of mind regarding how secure their blog is.
I’m not running WordPress, will you still test it?
Submit your request via the Contact form. This will be accepted on a case by case basis.
Affiliates
Earn 50% of the donation received from the user, when a blog owner requests a scan from us via your website.
Send an affiliate request using our Contact form, with your full names, contact email address and your blog URL. Once the message is sent, you will be contacted within 24 hours (in most cases) with further details. This is a fantastic opportunity to provide bloggers with a more secure experience while blogging as well as getting something out of it via donations.
Disclaimer
DISCLAIMER OF WARRANTY. THE ASSESSMENTS PROVIDED BY MICHAELDAW.ORG, IT’S OWNER(S), CONTRIBUTER(S) or AFFILIATE(S) ARE PROVIDED ON AN "AS IS" BASIS, WITHOUT WARRANTY OF ANY KIND, INCLUDING WITHOUT LIMITATION THE WARRANTIES OF MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND NON-INFRINGEMENT. THE ENTIRE RISK AS TO THE QUALITY AND PERFORMANCE OF OUR WORDPRESS SECURITY TEST IS BORNE BY YOU. SOME STATES DO NOT ALLOW EXCLUSIONS OF AN IMPLIED WARRANTY, SO THIS DISCLAIMER MAY NOT APPLY TO YOU AND YOU MAY HAVE OTHER LEGAL RIGHTS.
LIMITATION OF LIABILITY. MICHAELDAW.ORG, IT’S OWNER(S), CONTRIBUTER(S) or AFFILIATE(S) SHALL NOT BE LIABLE TO YOU OR ANY OTHER PERSON FOR ANY INDIRECT, SPECIAL, INCIDENTAL, OR CONSEQUENTIAL DAMAGES OF ANY CHARACTER, WHETHER BASED ON CONTRACT, TORT, OR ANY OTHER LEGAL THEORY, ARISING OUT OF THE PERFORMANCE OF THIS AGREEMENT, INCLUDING, WITHOUT LIMITATION, DAMAGES FOR LOSS OF GOODWILL, WORK STOPPAGE, COMPUTER FAILURE OR MALFUNCTION, OR ANY AND ALL OTHER COMMERCIAL DAMAGES OR LOSSES. IN NO EVENT WILL MICHAELDAW.ORG, IT’S OWNER(S), CONTRIBUTER(S) or AFFILIATE(S) BE LIABLE FOR ANY DAMAGES IN EXCESS OF THE PRICE OF THE ASSESSMENT REQUESTED BY YOU, EVEN IF MICHAELDAW.ORG, IT’S OWNER(S), CONTRIBUTER(S) or AFFILIATE(S) SHALL HAVE BEEN INFORMED OF THE POSSIBILITY OF SUCH DAMAGES, OR FOR ANY CLAIM BY ANY OTHER PARTY. THIS LIMITATION OF LIABILITY SHALL NOT APPLY TO LIABILITY FOR DEATH OR PERSONAL INJURY TO THE EXTENT APPLICABLE LAW PROHIBITS SUCH LIMITATION. FURTHERMORE, SOME STATES DO NOT ALLOW THE EXCLUSION OR LIMITATION OF INCIDENTAL OR CONSEQUENTIAL DAMAGES, SO THIS LIMITATION AND EXCLUSION MAY NOT APPLY TO YOU.
[...] Your blog can have a free security check, for those readers who may not be technically inclined. More information on that is available here. [...]